Effective date: August 21, 2026
Rapid Records LC, doing business as Express Records (“Express Records,” “we,” “us,” or “our”), provides medical and billing record retrieval and related support services for law firms and other authorized customers (the “Services”). This Privacy Policy explains how we collect, use, disclose, retain, and protect personal information when you visit expressrr.com, contact us, apply for work with us, or interact with our Services.
In many cases, Express Records processes patient or case information on behalf of a law firm or other customer. In those situations, the customer generally determines why and how the information is processed, and its own privacy notices may also apply. Requests about information submitted to us by a law firm should ordinarily be directed to that law firm. We may refer a request to the appropriate customer when required or appropriate.
This Privacy Policy does not replace any business associate agreement, services agreement, patient authorization, or other contract governing information we process for a customer. If there is a conflict, the applicable agreement controls to the extent permitted by law.
Depending on how you interact with us, we may collect the following categories of information:
Contact and account information: Name, business name, title, postal address, email address, telephone number, username, account credentials, and similar identifiers.
Customer and service information: Law-firm and provider information, case or matter identifiers, requests, communications, status updates, invoices, transaction details, and customer-support information.
Patient and medical-record information: Information needed to fulfill an authorized records request, which may include a patient’s name, contact information, date of birth, identification details, health information, provider information, dates of service, medical or billing records, signed authorizations, and other information supplied by a customer, patient, legal representative, provider, or authorized source.
Payment and billing information: Billing address, payment status, transaction information, and limited payment details. Payment card or banking information may be handled by third-party payment providers rather than stored directly by us.
Communications: Messages, form submissions, emails, call information, feedback, and customer-support communications. Calls or electronic communications may be monitored or recorded when permitted by law and with any notice or consent required by law.
Employment or contractor information: Information contained in applications, resumes, references, work history, professional qualifications, screening responses, and related communications.
Website and device information: Internet Protocol address, device and browser type, operating system, referring pages, pages viewed, date and time of access, approximate location derived from an IP address, and cookie or similar technology identifiers.
Other information you provide: Any other information you choose to provide to us or that is reasonably necessary to provide the Services.
We may obtain information directly from you; from our customers; from patients and their authorized representatives; from healthcare providers, copy services, and records custodians; from service providers; from public sources; and from other parties authorized or permitted to provide it.
We may use personal information to:
We may use information for other purposes disclosed at the time of collection or with appropriate authorization or consent.
We may disclose personal information as reasonably necessary for the purposes described above, including to:
Customers and authorized participants: Law firms and other customers, their authorized users, patients or legal representatives, healthcare providers, records custodians, copy services, and others involved in fulfilling an authorized request.
Service providers and contractors: Vendors that provide hosting, cloud storage, software, security, communications, fax, email, customer support, analytics, payment, professional, or operational services. These parties are permitted to use information only as authorized and are expected to protect it appropriately.
Professional advisers: Lawyers, accountants, auditors, insurers, and consultants where reasonably necessary.
Governmental and legal recipients: Courts, regulators, law enforcement, or other parties when we believe disclosure is required by law or legal process, or is reasonably necessary to protect rights, safety, security, or property.
Business transaction parties: A buyer, investor, lender, successor, or adviser in connection with an actual or proposed merger, acquisition, financing, reorganization, bankruptcy, or sale of all or part of our business or assets.
Other parties at your direction or with authorization: Any recipient you or the relevant customer authorizes.
We do not sell personal information for money. If our practices change in a way that gives rise to a legally recognized right to opt out of a sale, targeted advertising, or certain sharing, we will provide the required notice and choice.
Express Records may receive or process protected health information while performing authorized record-retrieval services. When we act as a business associate under the Health Insurance Portability and Accountability Act (HIPAA), we use and disclose protected health information in accordance with applicable law and the governing business associate agreement. Information may also be processed pursuant to a valid patient authorization, individual right-of-access request, or other lawful authority.
This website Privacy Policy is not a Notice of Privacy Practices for a healthcare provider or health plan. Questions about a provider’s use of protected health information should be directed to that provider.
We and our service providers may use cookies, pixels, logs, and similar technologies to operate the website, remember preferences, understand traffic and usage, maintain security, and improve our Services. Some cookies are necessary for the website to function. Others may support analytics or communications.
You can control cookies through your browser settings and, when available, our website cookie controls. Blocking some cookies may affect website functionality. Our website may not respond to all browser-based “Do Not Track” signals because a uniform industry standard has not been adopted. Where required by applicable law, we honor legally recognized opt-out preference signals.
You may opt out of promotional emails by using the unsubscribe link in the message or contacting us at mail@expressrr.com. Opting out of marketing does not stop transactional, security, account, or service-related communications.
We do not share mobile contact information with third parties or affiliates for marketing or promotional purposes. Information may be shared with subcontractors in support services, such as customer service. All other categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.
We may use a mobile number and messaging consent to send communications requested or authorized by the recipient. Consent to receive text messages is not a condition of purchasing services. Message frequency may vary. Message and data rates may apply. A recipient may reply STOP to opt out or HELP for help. Opting out of text messages does not prevent us from communicating through non-SMS channels when permitted or required.
We retain personal information for as long as reasonably necessary to provide the Services, fulfill the purposes described in this Policy, comply with contractual and legal obligations, resolve disputes, maintain security and audit records, and enforce our agreements. Retention periods vary based on the type of information, the customer relationship, legal requirements, and the sensitivity and purpose of the information. We may delete, de-identify, or aggregate information when it is no longer reasonably necessary.
We maintain administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, use, alteration, or disclosure. Depending on the system and information involved, safeguards may include access controls, authentication, encryption, monitoring, workforce training, contractual protections, and secure service providers. No security measure or transmission method is completely secure, and we cannot guarantee absolute security.
Depending on where you live and subject to applicable exceptions, you may have rights to request access to, correction of, deletion of, or a copy of certain personal information; to withdraw consent where processing is based on consent; or to opt out of certain uses or disclosures.
To submit a privacy request, email mail@expressrr.com with the subject line Privacy Request, or write to the address in the Contact Us section. Please describe your request and your relationship with Express Records. We may need to verify your identity and authority before acting. If information was submitted by one of our customers, we may direct the request to or coordinate with that customer. We will not unlawfully discriminate against you for exercising an applicable privacy right.
You may appeal a decision concerning a privacy request by replying to our decision and stating that you wish to appeal. You may also contact the appropriate state attorney general or privacy regulator if you believe your rights have been violated.
Our website and Services are intended for businesses and adults and are not directed to children under 13. We do not knowingly collect personal information directly from children under 13 through the website. Information about a minor may be processed as part of an authorized legal or medical-record request. If you believe a child has provided information to us through the website without appropriate authorization, contact us.
Our website may link to third-party websites or services. Their privacy practices are governed by their own notices, not this Policy. We encourage you to review those notices before providing information.
We may update this Privacy Policy periodically. The revised Policy will be posted on this page with a new effective date. If required by law, we will provide additional notice or obtain consent for material changes.
Questions, concerns, complaints, or privacy requests may be sent to:
Rapid Records LC DBA Express Records
Attn: Privacy Officer
533 26th St STE 205
Ogden, UT 84401
Email: mail@expressrr.com
Phone: (801) 471-2002
